IN THE CLAIMS: 



1 . (Currently Amended) A data processing system for controlling access of at least one user to 
stored data, the data processing system comprising: 

means, responsive to a request from the user to access a set of the stored data that is available to 
the at least one user, for authenticating the use r, wherein the request is initiated by presentation of a token 
by the user ; 

means, responsive to successful authentication, for decrypting a user specific table associated 
with the user, wherein the user specific table identifies the set , and wherein the token comprises the 
means for authenticating the user and the means for decrypting the user specific table ; and 

means, responsive to successful decryption, for accessing the set , wherein the set is encrypted and 
the user specific table comprises (i) first data associated with decryption of the set and (ii) second data 
associated with location of the set, and wherein the means for accessing the set uses the first data to 
decrvpt the set and the second data to locate the set; 

wherein the stored data is capable of access by more than one user, wherein the data processing 
system includes a corresponding additional user specific table for each additional user of the more than 
one user, and wherein the system fitrther comprises means for accessing a data structure comprising user 
data associated with each user of the more than one users that references a table location of the user 
specific table associated with a given user . 

2 - 3. (Cancelled) 

4. (Previously Presented) The data processing system of claim 1, wherein the set comprises all of 
the stored data. 

5. (Previously Presented) The data processing system of claim 1, wherein the set comprises a 
portion of the stored data. 

6. (Cancelled) 

7. (Currently Amended) The data processing system of claim [[6]] i, wherein the token comprises 
means associated with an identity of the user. 
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8. (Previously Presented) The data processing system of claim 7, wherein the means associated 
with the identity of the user is derived from one or more biometric characteristics associated with the user. 

9. (Cancelled) 

10. (Cancelled) 

1 1 . (Currently Amended) A method of controlling access by at least one user to stored data via a 
data processing system, the method comprising the steps of: 

in response to a request from the user to access a set of the stored data that is available to the user, 
authenticating the user , wherein the request is initiated by presentation of a token by the user ; 

in response to successful authentication, decrypting a user specific table associated with the user, 
wherein the user specific table identifies the set , and wherein the token comprises the means for 
authenticating the user and the means for decrypting the user specific table ; and 

in response to successful decryption, accessing the set , wherein the set is encrvpted and the user 
specific table comprises (i) first data associated with decryption of the set and (ii) second data associated 
with location of the set, and wherein the accessing the set uses the first data to decrypt the set and the 
second data to locate the set: 

wherein the stored data is capable of access by more than one user, wherein the data processing 
system includes a corresponding additional user specific table for each additional user of the more than 
one user, and wherein the system fitrther comprises accessing a data structure comprising user data 
associated with each user of the more than one users that references a table location of the user specific 
table associated with a given user . 

12. (Currently Amended) A tangible medium on which is stored a computer program product, 
wherein the computer program product comprises: 

first computer readable instructions for, in response to in response to a request from the user to 
access a set of the stored data that is available to the user, authenticating the use r, wherein the request is 
initiated by presentation of a token by the user ; 

second computer readable instmctions for, in response to successful authentication, decrypting a 
user specific table associated with the user, wherein the user specific table identifies the se t, and wherein 
the token comprises the means for authenticating the user and the means for decrypting the user specific 
table; and 
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third computer readable instructions for, in response to successful decryption, accessing the set^, 
wherein the set is encrypted and the user specific table comprises (i) first data associated with decryption 
of the set and (ii) second data associated with location of the set, and wherein the third computer readable 
instructions for accessing the set uses the first data to decrypt the set and the second data to locate the set: 

wherein the stored data is capable of access by more than one user, and includes a corresponding 
additional user specific table for each additional user of the more than one user, and further comprising 
fourth computer readable instructions for accessing a data structure comprising user data associated with 
each user of the more than one users that references a table location of the user specific table associated 
with a given user . 

13. (Currently Amended ) The data processing system of claim 1 . w h e r e in th e data proc e ssing 
system includes a conesponding additional user specific table for each additional user of the at least one 
Hseir wherein the means for decrypting also comprises means for attempting to decrypt, in turn, each of 
the corresponding additional user specific tables as well as the user specific table until a successful 
decryption occurs. 

14. (Cancelled) 

15. (Currently Amended) The method of claim 1 1 , wherein a corresponding additional user 
specific table is provided for each additional user of the at least one user, and wherein the method further 
comprises: 

attempting to decrypt, in turn, each corresponding additional user specific table as well as the user 
specific table until a successful decryption occurs. 

16. (Cancelled) 

17. (Currently Amended) The tangible medium of claim 12 wherein, with respect to the computer 
program product, a corresponding additional us e r sp e cific table is provided for each additional user of the 
at least one user, and wherein the computer program further comprises: 

fourth computer readable instructions for attempting to decrypt, in turn, each con-esponding 
additional user specific table as well as the user specific table until a successful decryption occurs. 

18. (Cancelled) 
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